Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7993BF72B8FA11EDA484EF7CF1222468.roa
File: 7993BF72B8FA11EDA484EF7CF1222468.roa (raw, json)
Hash identifier: GGdk28Ty+tEbmWt7ljg7Jx8R9yPzulETkS8/zZu8lXI=
Subject key identifier: B3:B5:6A:86:21:A5:6E:A9:7B:DB:EF:14:D9:1B:2E:E2:43:06:92:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CCB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7993BF72B8FA11EDA484EF7CF1222468.roa
Signing time: Thu 02 Mar 2023 13:02:24 +0000
ROA not before: Thu 02 Mar 2023 13:02:20 +0000
ROA not after: Sat 01 Mar 2025 13:02:20 +0000
asID: 61317
IP address blocks: 154.16.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 13:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3275 (0xccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 13:02:20 2023 GMT
Not After : Mar 1 13:02:20 2025 GMT
Subject: CN=64009e60-bfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1f:95:7a:48:8a:93:c6:5d:ba:f9:75:e1:0f:
02:d0:42:60:51:61:4f:2f:32:06:2f:66:a0:3a:f8:
bd:8a:a3:a2:8c:ea:89:1e:c7:76:19:3c:53:1b:ff:
7c:62:03:c7:6f:29:c7:25:6b:42:7d:63:7c:38:eb:
27:4f:07:95:ce:96:31:6e:4b:0b:98:58:30:f2:32:
4b:8f:77:24:01:2c:1a:25:a2:8d:92:bf:45:65:55:
1f:c5:a6:ed:ef:1f:8a:dd:6b:b4:cf:48:b2:d7:df:
1e:a7:b4:9c:1f:50:7e:79:fd:09:0c:d1:53:78:66:
96:e2:8d:a8:d6:83:82:de:c7:77:11:fa:f4:b7:a0:
09:d6:1e:80:c3:7f:d5:80:40:93:7d:78:69:d7:22:
7d:3c:23:90:2b:93:1e:71:08:db:b4:e8:85:2c:40:
b9:d4:63:e0:d4:49:f1:62:f6:53:a4:b4:64:6d:4e:
3c:5b:e5:0f:ad:7a:7e:0d:36:54:cd:a6:33:21:47:
bd:65:10:90:cb:ca:0f:7c:1a:20:2f:b8:f2:5c:c3:
9e:ea:07:20:fe:f5:63:69:7c:22:c9:fa:5d:7c:87:
0d:62:96:1c:c9:c8:ab:b2:3c:3a:9a:f6:6b:cc:c5:
a6:00:40:fc:95:11:63:2c:7f:fa:9f:27:34:b6:82:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:6A:86:21:A5:6E:A9:7B:DB:EF:14:D9:1B:2E:E2:43:06:92:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7993BF72B8FA11EDA484EF7CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:db:42:6d:d5:38:f4:5c:1c:aa:49:86:2b:09:4f:e4:db:61:
2e:b1:0e:5e:52:39:1c:43:5c:d0:a0:5a:f3:b5:3e:7e:68:da:
ae:58:12:f2:de:64:b2:49:e1:0a:78:a8:11:0f:fa:aa:a7:ff:
70:fa:94:1a:89:82:d7:e5:3f:cd:a3:70:62:89:20:56:89:55:
fc:76:86:bb:31:11:17:f0:f6:09:df:e0:8a:c5:74:e3:90:d9:
b1:ae:d2:d5:74:24:d9:87:50:27:29:a0:ba:51:34:99:a0:6f:
4d:14:9b:c4:6f:d4:f5:a3:d8:82:dc:e2:79:cf:34:fe:0d:b6:
16:38:b6:c4:58:96:86:84:8d:4c:8c:55:34:8e:9e:93:07:5c:
af:0a:2a:24:6b:d5:27:9f:b5:7e:63:fd:20:be:24:7c:cc:6d:
db:81:66:e2:9d:5e:72:bc:e5:e8:1b:a7:56:63:59:e5:d8:df:
a4:79:f7:eb:14:4a:25:17:be:85:ba:60:dd:af:2d:7f:ec:25:
21:9b:5f:5e:a0:f7:ea:2b:08:8a:c5:5e:12:8d:6e:1d:9a:2a:
66:c4:0c:37:52:f3:e8:b1:8e:a2:af:7d:1e:40:76:3d:5b:79:
82:9c:80:09:8a:a7:f4:13:a0:81:16:f0:9e:06:e6:99:c6:ec:
65:03:16:6a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDMswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAzMDIxMzAyMjBaFw0yNTAzMDExMzAyMjBaMBgxFjAU
BgNVBAMMDTY0MDA5ZTYwLWJmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD5H5V6SIqTxl26+XXhDwLQQmBRYU8vMgYvZqA6+L2Ko6KM6okex3YZPFMb
/3xiA8dvKccla0J9Y3w46ydPB5XOljFuSwuYWDDyMkuPdyQBLBoloo2Sv0VlVR/F
pu3vH4rda7TPSLLX3x6ntJwfUH55/QkM0VN4ZpbijajWg4Lex3cR+vS3oAnWHoDD
f9WAQJN9eGnXIn08I5Arkx5xCNu06IUsQLnUY+DUSfFi9lOktGRtTjxb5Q+ten4N
NlTNpjMhR71lEJDLyg98GiAvuPJcw57qByD+9WNpfCLJ+l18hw1ilhzJyKuyPDqa
9mvMxaYAQPyVEWMsf/qfJzS2giITAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUs7Vq
hiGlbql72+8U2Rsu4kMGktcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzc5OTNCRjcyQjhGQTExRURBNDg0RUY3Q0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPwwDQYJKoZIhvcNAQEL
BQADggEBAJ/bQm3VOPRcHKpJhisJT+TbYS6xDl5SORxDXNCgWvO1Pn5o2q5YEvLe
ZLJJ4Qp4qBEP+qqn/3D6lBqJgtflP82jcGKJIFaJVfx2hrsxERfw9gnf4IrFdOOQ
2bGu0tV0JNmHUCcpoLpRNJmgb00Um8Rv1PWj2ILc4nnPNP4NthY4tsRYloaEjUyM
VTSOnpMHXK8KKiRr1SeftX5j/SC+JHzMbduBZuKdXnK85egbp1ZjWeXY36R59+sU
SiUXvoW6YN2vLX/sJSGbX16g9+orCIrFXhKNbh2aKmbEDDdS8+ixjqKvfR5Adj1b
eYKcgAmKp/QToIEW8J4G5pnG7GUDFmo=
-----END CERTIFICATE-----
Generated at Fri Mar 29 18:21:10 2024 by rpki-client on console-ams.rpki-client.org